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LISTING OF CLAIMS 

1. (currently amended) For a system wherein a packet 
is transmitted across a network along an access chain 
constituted by a plurality of connections, an access chain 
tracing method comprising the steps of: 

comparing stored dat a including at least packet size 
,nri data length the oisc of the data in extracted from a 
packet at the time a first connection is made with stored 
data inclnriinn at least pack et, size and data length -fcfee 
alzc of Lin d.itr ^ -» ^trar.ted from said packet at the 
time a second connection is made; and 

employing the comparison result to determine whether 
the packet at tha first r.onnaction and the packet at the 
second connection ar * the sam* packet and whether said 
first connection and said second connection are to be 
included in the same access chain for tracing the path of 
said packet . 

2. (currently amended) The access chain tracing 
method according to claim 1, wherein said comparison step 
includes a step of calculating a difference between a 
first series of stored data , which is specified based on 
said data length and a detection time of said packet 

at said first connection, and a second series of stored 
data , which is specified based on said data lenqth 
and a detection time of said packet at said second 
connection/ and wherein, at said determination step, said 
difference is employed to determine whether the packet at 

the first connection anrf the packet at the second 

connection are the same packe t and whether said first and 
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said second connections are to be included in the same 
access chain. 

3* (currently amended) The access chain tracing 
method according to claim 1, further comprising steps of: 

receiving first packet data that includes said data 
length oiao and said detection time of said packet at said 
first connection; 

searching comparison packet data based on said 
detection time included in said first packet data that are 
received; and 

selecting a packet at said second connection based on 
the search results obtained at said search step, 

4. (currently amended) The access chain tracing 
method according to claim 3 claim — t, wherein said 
detection time is specified by a time stamp included in 
packet data, and said data length oizc is specified by a 
sequence number. 

5. (currently amended) The access chain tracing 

method according to claim 2 claim wherein said 

comparison step includes a step of sequentially comparing 
said first series of stored data with a plurality of 
segments of said second series of stored data that are 
formed by shifting a -fcke first term of one of said series 
of stored data . 

6. (currently amended) An access chain tracing 
method comprising the steps of: 

recording first packet data that include at least 
packet ^fcke size and of the data length extracted from i«- a 
JP919990248-US1 -7- 
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packet at a first connection and a detection time for said 
packet; 

recording second packet data that include at least 
packe t size and of the data length extracted from ±» 

said packet at a second connection and a detection time 

for said packet; 

transmitting said first packet data that are 

recorded; 

receiving said first packet data; 

comparing said first packet data with said second 
packet data to determine what change there was in the 3±zc 
e# the data length in said packet at the time of said 
first connection and in the jiac of the data length in 
said packet at the time of said second connection; 

employing the comparison result obtained at said 
comparison step to determine whether t h* packet at the 
first connoM-inn and the packet at the second connection 
ar6 the sam* packet and whether said first connection and 
said second connection are included in the same access 
chain; and 

transmitting the determination result obtained at 
said determination step. 

7. (currently amended) A computer-readable storage 
medium on which a program is stored to permit a computer 
to perform the method for an access chain tracing method 
comprising the steps of: 

comparing stored data includin g at least packet size 
*nd data length the alec of the data in extracted from a 
packet at the time a first connection is made with stored 
data including at l pasf. packet size and data length *fee- 
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^,1 u£ LIj i. .HiM in n extracted from said packet at the 
time a second connection is made; and 

employing the comparison result to determine whether 
vho »»r*«t. at ^ *<™t-. connection and the packet at the , 
oornnri mnnPCt J- — ^mo packet and whether said 

first connection and said second connection are to be 
included in the same access chain for tracin q the path of 
said packet . 



8 (currently amended) For a system wherein a packet 
is transmitted across a network along an access chain 
constituted by a plurality of connections, an access cham 
tracing system comprising: 

a comparator for comparing stored data including at 
i-,.* M rtrt I""** Lin oiEC of the data m 

^™r.*«d from a packet at the time of a first connection 
„ith «^™d data inHnrfina at least packet sir.e and data 
length LU c j i^c of the data i n extracted from said packet 
at the time of a second connection; and 

a determiner for employing the comparison result 
obtained by said comparator to determine whether £he 
packet at the first connec t inn and the packet at the 
S prnnd connexion are ^ same packet and whether said 
first connection and said second connection are to be 
included in the same access chain for tracing the path of 
said packet . 



w 



9. (currently amended) The access chain tracing 
system according to claim 8, wherein said comparator 
calculates a difference between a first series of stored 
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data, which is specified based on said data fHree- length 
and a detection time of said packet at said first 
connection, and a second series of stored data, which is 
specified based on said data length eiee- and a detection 
time of said packet at said second connection; and wherein 
said determiner employs said difference to determine 
whether the packet at the f irst connection and the packet 
at the second connection a re the same packet and whether 
said first and said second connections are to be included 
in the same access chain. 

10. (currently amended) The access chain tracing 
system according to claim 8, further comprising: 

a receiver for receiving first packet data that 
includes said data length «ree- and said detection time of 
said packet at said first connection; 

a transmitter for transmitting the results obtained 
by said determiner. 

11. (original) The access chain tracing system 
according to claim 10, further comprising: 

a searching unit for searching comparison packet data 
based on said detection time included in said first packet 
data that are received; and 

a selector for selecting a packet at said second 
connection based on the search results obtained at said 
searching unit. 

12. (currently amended) The access chain tracing 
system according to claim 10 claim — 8-, wherein said 
detection time is specified by a time stamp included in 
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packet data, and said data length is specified by a 

sequence number . 

13. {currently amended) The access chain tracing 
system according to claim 9 claim 8 , wherein said 
comparator sequentially compares said first series of 
stored data with a plurality of segments of said second 
series ^ stored data that are formed by shifting the 
first term nne of said series of stored data. 

14. (original) For a system wherein a packet is 
transmitted across a network along an access chain 
constituted by a plurality of connections, an access chain 
tracing system comprising: 

a recording unit for recording packet data that 
include information concerning packet size and detection 
t ime ; 

a transmitter for transmitting said packet data to a 
different site for a determination to be made; and 

a receiver for receiving the determination result 
from said different site. 

15. (currently amended) A network system comprising: 
a first collection device for collecting first packet 
data arising OP ^ct- size, data length L haL include th n 
r,j E e of data in packet- and a detection time, and for 
transmitting said first packet data; 

a second collection device for collecting second 
packet data comprising nar.ket size, — data lenqth 
in c lude the Jin of dnt.a iu jcti d r nn k nt and a detection 
time; and 
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a calculation system for comparing said first packet 
data with said second packet data to determine what change 
there was in the data length in said packet at 

the time of a first connection and in the *i*c of the data 
len ath in said packet at the time of a second connection, 
ZTlor employing the comparison result to determine 
whether , ho parV.t at the f 1r~t common and 

»«rond *-"nn are thP <same packet and whether 

said first connection and said second connection are 

included in the same access chain. 

16 (currently amended) The network system according 
to claim 15, wherein said calculation system calculates a 
difference between a first series, which is specified 
based on said data length and a detection time of 

said packet at said first connection, and a second series, 
which is specified based on said data length **** and a 
detection time of said packet at said second connection, 
and employs said difference to determine whether the 
racket at 1-he firs t r-nrmection and the packet at the 
co^H ronnerH on „r« th e same pac ket and whether said 
first and said second connections are to be included in 
the same access chain. 
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